summaryrefslogtreecommitdiff
path: root/docker/nova
AgeCommit message (Collapse)AuthorFilesLines
2017-04-20Add missing cleanup step for new apache imagesMartin André1-0/+13
A few new images got apache as part of blueprint apache-packages-for-apis without a cleaning up. Without this step the containers may fail to restart due to runtime files already present. This commit fixes it for all images with the exception of heat-base so that it can be cleanly backported to stable/ocata. It also removes the unused APACHE_DIR variable from freezer-api and keystone extend_start.sh script. Change-Id: I47d75221b3d1aae91f11d3e0da83e221a00315b7 Closes-Bug: #1679565
2017-04-20Use LABEL instead of MAINTAINER (deprecated) in all Dockerfile.j2Chen13-13/+13
Use LABEL instruction instead of MAINTAINER (deprecated) instruc- tion as suggested by Docker's official dockerfile guide. docs.docker.com/engine/reference/builder/#maintainer-deprecated Closes-Bug: #1683652 Change-Id: Ie87a1ddf31aefcd0b623fd2837d78de420e76898
2017-04-13debian: move to stretchMarcin Juszkiewicz1-2/+2
Debian 'jessie' even with backports lacks some packages Kolla expects. Due to this we (Linaro) move to Debian 'stretch' release with our OpenStack work. Stretch is now frozen so there should not be many changes. Partially-Implements: blueprint multiarch-and-arm64-containers Change-Id: Iab7232cbe6f8fc3e3de10c67f3d89f134b185f05
2017-04-12handle rtslib(-fb) package names and dependenciesMarcin Juszkiewicz1-11/+33
Ubuntu has rtslib/targetcli packages while CentOS and Debian use 'fb' fork of those. Partially-Implements: blueprint multiarch-and-arm64-containers Change-Id: I8721854eefa6c55bb6e627db9a051c8f9202d1e1
2017-04-06Merge "debian: enable all images enabled for Ubuntu"Jenkins13-20/+20
2017-04-05Add vSphere Supportjimmygc1-4/+16
Add oslo.vmware and vmware_nsx packages into kolla. Change-Id: I2a1ed314b970a4832f7f8256c1929921f36069f2 Implements: blueprint kolla-support-vsphere Co-Authored-By: shaofeng cheng <chengsf@winhong.com>
2017-04-04debian: enable all images enabled for UbuntuMarcin Juszkiewicz13-20/+20
Debian support is not maintained in Kolla so it got a bit behind Ubuntu one. This changeset enables Debian for all images. Jessie (even with backports) may be too old for some images though. Also unify distro check to ['debian', 'ubuntu'] to keep alphabetical order like it is done for RPM distributions. Partially-Implements: blueprint multiarch-and-arm64-containers Change-Id: I056233fbfa277e0e2360c07c3f80d9558c554357
2017-03-28Alphabetize packagesEduardo Gonzalez6-60/+60
Some images have packages sorted alphabetically and some not. Unify common style between all images. Change-Id: I906ed89c10b12886665618752f525ba71d83d991
2017-03-27RHEL: Add mod_ssl for services running over httpdJuan Antonio Osorio Robles2-7/+15
This apache module is necessary for when one wants to use TLS for the services running over httpd. This only addressed RHEL based systems at the moment, since there is no such package available for Ubuntu. This requires apache2.2-common which will carry a lot more dependencies; So I think this should be handled and decided in a separate patch. when installing mod_ssl in RHEL-based distributions, an ssl.conf file is installed in the /etc/httpd/conf.d directory. This file tells httpd to listen on port 443; however, we don't want to do this by default, since this should be explicitly enabled by the container's configuration. This line is thus removed from the configuration. A release note was added, which specifies this. And the last sentence can be removed if this is addressed for debian/ubuntu as well. Related-Bug: #1675490 Co-Authored-By: Martin André <m.andre@redhat.com> Change-Id: Id6215d31547247309d43c031e163fa9e4c4ec5dc
2017-03-23Prevent apache from listening on port 80Martin André1-3/+9
A few new images got apache as part of blueprint apache-packages-for-apis without restricting it to listen on port 80. This commit fixes it for all images with the exception of heat-base so that it can be cleanly backported to stable/ocata. Co-Authored-By: Juan Antonio Osorio Robles <jaosorior@redhat.com> Change-Id: Idd3bbeffea9233eaed420798e22ea9a3a517c166 Closes-Bug: #1675308
2017-03-23Merge "Add libosinfo package for source installation"Jenkins1-0/+2
2017-03-15Refactor and enable shell accessMohammed Naser1-2/+3
When installing from binary, packaging tools create a user for Keystone which does not have a shell. This results in fernet token operations failing due to the fact that `rsync` cannot connect over SSH because the Keystone user cannot login. This patch addresses this issue by enabling shell access to the Keystone user, it also refactors the Nova SSH controller to use the pre-existing macro. Change-Id: Ic753a94311c5d7d72a82d91c1279dfe982e9afbd Related-Bug: #1617902
2017-03-15Add libosinfo package for source installationJeffrey Zhang1-0/+2
libosinfo is required by nova-compute. Change-Id: I5615e191d1a9a2ea35cab41b6b03803ebfaf3cb1 Closes-Bug: #1670692
2017-03-12Add mkfs.vfat to nova-compute source imagesDave Walker (Daviey)1-0/+2
Currently Windows and non-declared os_type images (defaults to Windows) attempt to format ephemeral volumes with mkfs.vfat but fail as this tool is not available in the container. This is resolved by installing dosfstools on the Source builds (as I believe this is handled in binary builds through dependencies). Change-Id: Iefa5fb0a16eed30aea935268f2a9becb1481b018 Closes-bug: #1672199 Signed-off-by: Dave Walker (Daviey) <email@daviey.com>
2017-02-17Use install-pip macro in most source imagesChao Guo2-2/+7
1. Enable customization of pip packages in source branch of most images 2. All pip packages install uniformly through install-pip macro, user can easily customize his own pip command (For example using a mirror) Co-Authored-By: Mauricio Lima <mauriciolimab@gmail.com> Change-Id: If09582039f690fa4136e8f33200d5da15e092da7
2017-02-05Remove include_header and include_footer in all DockerfilesJeffrey Zhang11-11/+0
include_header and include_footer parameter is already removed, remove them in all Dockerfiles. Add missing footer block. Change-Id: I90da03eb9f95a3827361d5f5ede65fde7d6be2b3
2017-02-03Merge "Containerized sshd does not work with older PAM"Jenkins1-1/+2
2017-02-03Containerized sshd does not work with older PAMVladislav Belogrudov1-1/+2
sshd containers don't let logins on some systems with older PAM library because /proc/self/loginuid is not always readable or writeable. Examples of possible failures on such systems are erroneous cold and live migrations. This fix does not upgrade PAM but makes pam_loginuid optional for nova_ssh and keystone_ssh. More information: https://github.com/docker/docker/issues/5663 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=726661 https://git.fedorahosted.org/cgit/linux-pam.git/tree/modules/pam_loginuid/pam_loginuid.c#n61 Change-Id: Ic14255b042ceedcff536c062bdcba00502af7a87 Closes-Bug: #1651395
2017-02-02Merge "Add nova-placement-api container"Jenkins2-0/+70
2017-02-02Add openvswitch package for nova-libvirt containerJeffrey Zhang1-0/+3
Change-Id: I61ce3b695e66cd76f8f9a43863c94601d312e8fe Closes-Bug: #1661152
2017-02-01Add nova-placement-api containerJeffrey Zhang2-0/+70
Change-Id: I30efc20e6d918e08860584c017455e6d5fa91a35 Closes-Bug: #1660987
2017-01-17use static uid/gid in imagesSam Yaple3-21/+10
This centralizes all user and group creation into a single source. This will fix any current and furture uid/gid mismatches (such as with nova-libvirt). In the process, we also unify users between the distros in a standard way. The users in the following containers change from thier defaults: Ubuntu: _chrony user is now chrony Ubuntu: memcache user is now memcached All: qemu user is used for ownership and socket permissions All uid and gid numbers are customizable via kolla-build.conf Co-Authored-By: Kris Lindgren <klindgren@godaddy.com> Change-Id: I120f26ab0683dc87d69727c3df8d4707e52a4543 Partially-Implements: blueprint static-uid-gid
2017-01-12Add Apache packages to nova-api containerDan Prince1-2/+25
Some projects that use Kolla docker containers (TripleO) run nova-api under httpd. This patch adds the httpd package so that it exists in the container and can optionally by used via Docker entrypoints. As many of these projects do not require the use of Apache (it is opt-in) at this point not all deployment frameworks support the use of it so the existing configuration defaults have been left as-is for now. Partial-Blueprint: apache-packages-for-apis Change-Id: Id22da4626c659d8c9f457b71d9423e5fd9e8c25a
2017-01-03Remove source install type for novnc / spicePaul Bourke2-11/+20
Currently Kolla only offers source installs for OpenStack projects. The novnc and spice images have been consistent with this resulting in tarballs being pulled from github. The binary/source distinction should be removed for these images. Change-Id: Ibdf593a2a164e39bba3ea2a0e6333f2de876c2a0
2016-12-01Remove the "nova-network" container filecaoyuan1-41/+0
The nova-network service was deprecated, this patch to remove nova-network container. TrivialFix Change-Id: I73b4215f7538570e1140780e9f52df9ca58e92ff
2016-11-14Merge "Allow operators to customise pip packages in nova_compute"Jenkins1-1/+6
2016-11-11Allow operators to customise pip packages in nova_computePaul Bourke1-1/+6
TrivialFix Change-Id: I75b82d1d949990f77a1d70992c23544cf53cf9b3
2016-11-07Allow cinder-volume to be configured to use NFSxionglingfeng1-0/+4
Allow cinder-volume, nova-compute and nova-libvirtd to be configured to use NFS. In order to mount and work with NFS shares, several containers needed the NFS packages installed during build time. One somewhat significant change is the addition of an explicit bind volume for nova-compute that has shared mounts enabled. According to docker-run(1), the shared mount propagation flag can only be specified for bind mounted Docker volumes and not named volumes. In an NFS setup, cinder-volume mounts the NFS shares so that it can create and manage the Cinder volumes. When a new instance is created with a Cinder volume or a Cinder volume is attached to an existing instance, nova-compute mounts the Cinder volume from the NFS share for nova-libvirtd. In order for nova-libvirtd to then see those Cinder volumes the shared mounts flag must be enabled for the Docker volume. Remove the rpcbind container as it is only necessary for operators who are using NFSv3 or lower. There is no known need for this currently however, this container can be added in the future should an operator require it. Co-authored-by: Ryan Hallisey <rhallise@redhat.com> Co-authored-by: Andrew Widdersheim <amwiddersheim@gmail.com> Change-Id: Iad77c05bce8876bdcc69b7ec22edd50e3bf48b9f Closes-Bug: #1530515 Partially implements: blueprint nfs-support-in-cinder
2016-11-06Merge "nova-spicehtml5proxy dependency package added"Jenkins1-2/+4
2016-11-03Remove Fedora supportChristian Berendt12-16/+16
Closes-bug: #1616387 Change-Id: Id97f88b9baa3d48d33ce120962450a374282d044
2016-11-03nova-spicehtml5proxy dependency package addedprameswar1-2/+4
centos based container already have python-websockify installed. but it gives warning to install numpy package. ubuntu based container need to install websockify package that will install both module websockify and its dependency numpy module. so no need to install numpy package externally in ubnutu but in centos it need to install. Closes-bug: #1638801 Change-Id: Ic858543733ec86f55ab506edcd3631a6df1a086d
2016-10-12Fix the failure to launch instance when enabled CephJeffrey Zhang1-1/+1
We need install qemu-kvm package which come from the Cloud SIG rather then qemu-system-x86 which come from EPEL. Change-Id: Ibd027069771552d3db0e4fe0c7406ddd1bfc0673 Closes-Bug: #1631984
2016-09-16Merge "Add nova-serialproxy container"Jenkins1-0/+27
2016-09-15Merge "Switch arguments to usermod"Jenkins1-1/+1
2016-09-14Switch arguments to usermodJeff Peeler1-1/+1
Need to add nova user to qemu group. Change-Id: I0df21d00fb295e0f2c14dd6abd4bee518fec8371 Closes-Bug: #1623682
2016-09-14Add nova-serialproxy containerEduardo Gonzalez1-0/+27
Change-Id: I9cd7e6d26af913f06f6b9119496e2f228266b293 Partially-Implements: blueprint nova-proxies Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>
2016-09-13Add header blocks to all DockerfilesPaul Bourke12-0/+24
Change needed to add header blocks to all Dockerfiles, similar to the base. Use case is to easily run something before packages are installed, e.g. to COPY a local rpm in that can be added to the package list. Change-Id: I1bbfdf0b762da0a392aa8bf47781315b45377bee Closes-Bug: 1618969
2016-09-01Merge "Create the nova instances directory when need during starting"Jenkins1-4/+1
2016-08-31Merge "Fix nova_ssh container shell to allow instance resizes."Jenkins1-0/+2
2016-08-31Fix nova_ssh container shell to allow instance resizes.Matthew Taylor1-0/+2
According to the configuration reference, http://docs.openstack.org/mitaka/config-reference/compute/resize.html When using KVM, nova utilizes SSH for instance resizing. Kolla nova_ssh container has the nova user configured with "/sbin/nologin" shell, which prevents nova_compute from successfully resizing instances. Added fix to change shell from nologin to bash. Change-Id: I46a48e242dae6ee6c9159bc30edd8b823ffbb515 Closes-Bug: 1617902
2016-08-29Change source with dot at extend_start filesEduardo Gonzalez1-1/+1
Is a best practice in Unix/Linux scripts to use dots instead of source command. Using dots will avoid issues with non BASH shells TrivialFix Change-Id: Ie6480a1954f853f79faffa093452715ebd9f7d90 Signed-off-by: Eduardo Gonzalez <dabarren@gmail.com>
2016-08-25Customizations for NovaPaul Bourke12-171/+270
Change-Id: I7556d6cd473516c7ceb4aba7c1ba1130af2544ee Partially-implements: blueprint third-party-plugin-support
2016-08-20Create the nova instances directory when need during startingJeffrey Zhang1-4/+1
The /var/lib/nova/instances should be create if it do not exist during starting nova-compute container. Rather than create it at the bootstrap service stage. Change-Id: Ibcc5fb8eec0b38cf2b4313f48d1beb3ba83b1e85 Closes-Bug: #1614970
2016-08-20Pin to Ubuntu 16.04Jeffrey Zhang1-0/+1
Upgrade Ubuntu base image to Xenial Closes-Bug: #1593599 Change-Id: I5832a729a9a4fa73c02442047c92ba088ce20db3
2016-07-05Fix the overwrite sudoers file issueJeffrey Zhang1-2/+2
Change-Id: I4b109f7fdc3b8e49defed26979b04ca158842e98 Closes-Bug: #1598423
2016-06-16Fix ownership of nova-novncproxy-source directoryChristian Berendt1-1/+3
This solves the following issue when using latest noVNC sources for the nova-novncproxy container: OSError: [Errno 13] Permission denied: '/usr/share/novnc' Change-Id: Iea1f3dfcc696f53431e99570019e27cdef4ca5cb Closes-bug: #1593006
2016-06-04Make nova-libvirt container build with debianBenedikt Trefzer1-3/+16
- handle different xen-utils version in debian/ubuntu - add rm -f to ignore nonexistent file in debian - add variable for libvirt group since different in debian Partially-implements: blueprint build-debian Change-Id: I44c55981819294286d163b5391aefe967b6dd1d9
2016-05-30Install missing package in spiceproxy containerChris Ricker1-0/+1
nova-spicehtml5proxy service fails on RPM-based systems unless the spice-html5 RPM is also installed. Change-Id: I0807159cd68bcc9df4da2d94d7b54a2871236f59 Closes-Bug: #1587212
2016-05-26Update ubuntu dockerfiles for formattingSwapnil Kulkarni (coolsvap)12-14/+14
Change-Id: If4be00b937e14ec93443dcb7249cf17099d57cbe Closes-Bug: #1569417
2016-04-21Fix failure to deploy with qemu.confSteven Dake1-1/+0
Closes-Bug: #1572819 Change-Id: I1f2edb482af1e85708159a0dba44a79427dc5af3